It protects against system breakage and malware because the core of the OS is sealed and updates can only fully complete or fully fail, you can’t have a half-uodated system like Ubuntu would be if you unplugged the PC half way through.

And because your apps and commandline tools are sandboxed with Flatpak and toolbox/distrobox so malware getting in through one doesn’t compromise the whole system.